Firetruck

CVE-2026-54420

KEV
Updated Jun 16, 2026 · PUBLISHED
View KEV entry →

Description

LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
WHM and cPanel PlugInLiteSpeed Technologies / cPanel Plugin>= 2.3, < 2.4.8affected